← 返回 Skills 市场
Sports Betting
作者
skinnynoizze
· GitHub ↗
· v1.3.1
· MIT-0
1118
总下载
0
收藏
3
当前安装
7
版本数
在 OpenClaw 中安装
/install sports-betting
功能描述
Place and claim decentralized sports bets on-chain via Pinwin and Azuro: real-time odds, high liquidity, no custody. Fetch prematch and live games from the A...
安全使用建议
This skill appears internally consistent and implements the expected flow for on‑chain betting. Before installing: 1) Only use a dedicated wallet/private key with limited funds — the skill will sign real transactions with BETTOR_PRIVATE_KEY. 2) Review and verify the contract addresses and API hosts (Pinwin, Azuro/onchainfeed) in the constants; mismatch could indicate tampering. 3) Be aware scripts log decoded payloads and request bodies (which may contain betting details); avoid running where logs are public. 4) Install npm deps from the official registry only and audit packages if you need higher assurance. 5) Keep the agent invocation manual (the skill already sets disable-model-invocation: true) and always confirm each transaction as instructed. If you want greater safety, require a hardware or remote-signing step (use a signer that never exposes the raw private key) or review the GitHub source and checksum before use.
功能分析
Type: OpenClaw Skill
Name: sports-betting
Version: 1.3.1
The skill bundle provides a legitimate sports betting interface for the Polygon network using Pinwin and Azuro. While it requires a sensitive 'BETTOR_PRIVATE_KEY', the implementation follows security best practices: the key is used only for local EIP-712 signing via 'viem' and is never transmitted. The 'SKILL.md' instructions include strict safety rules requiring explicit user confirmation for every transaction, and the scripts ('place-bet.js', 'claim-bets.js') perform rigorous integrity checks on API payloads and contract addresses before signing. No evidence of data exfiltration, malicious execution, or prompt injection was found.
能力评估
Purpose & Capability
The skill's name/description (Pinwin/Azuro on Polygon) match the actual code and network endpoints. Requesting a wallet private key (BETTOR_PRIVATE_KEY) and Node is expected for signing and broadcasting EIP-712 transactions. Declared constants (token, contract addresses, RPC, Pinwin/API endpoints) are directly used by the scripts.
Instruction Scope
Runtime instructions are narrow and focused: fetch games, prepare payloads, require explicit user confirmation before any signing/sending, and query subgraphs for status. The SKILL.md contains explicit safety rules (one confirmation per bet, no autonomous retries) and the skill is invocation-only (disable-model-invocation: true). Note: scripts print request/decoded payloads and other debug info to console; those logs can expose bet details and should be considered when running in a shared/logged environment.
Install Mechanism
There is no packaged installer; the skill is instruction-only but includes package.json and package-lock.json. It expects the user to run npm install (viem, @azuro-org/dictionaries, dotenv). These are public npm packages (registry.npmjs.org) — standard but carries the usual npm supply-chain risk; no obscure download URLs or extracted archives are used.
Credentials
Only one high-sensitivity env var is required: BETTOR_PRIVATE_KEY (declared as primaryEnv). That is proportional to the purpose (signing blockchain transactions). The SKILL.md recommends storing the key in a .env file under the skill workspace with chmod 600; this is reasonable but still means the agent environment will have direct access to the private key. Consider using a dedicated betting wallet with limited funds.
Persistence & Privilege
The skill is not always-enabled, does not request system-wide config changes, and is invocation-only (disable-model-invocation true). It does not modify other skills’ configs. No elevated persistence privileges are requested.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install sports-betting - 安装完成后，直接呼叫该 Skill 的名称或使用
/sports-betting触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.3.1
sports-betting 1.2.3 — Major cleanup and claim script addition.
- Added scripts/claim-bets.js for handling bet claim/redeem actions.
- Removed legacy reference files (api.md, bets-subgraph.md, dictionaries.md, polygon.md, subgraph.md, viem.md).
- Updated and clarified contract addresses for claimContract and clientCore.
- Expanded documentation on secure handling of BETTOR_PRIVATE_KEY, emphasizing .env usage and security.
- Improved and clarified constants, setup instructions, and best practices for user safety.
v1.2.2
sports-betting 1.2.2
- Updated Azuro data-feed source to the new REST API endpoint (`https://api.onchainfeed.org/api/v1/public/market-manager/`) for fetching games and odds.
- The get-games.js script now uses the REST API, with two-step data fetching, improved main market detection, and direct human-readable titles (no more subgraph JSON parsing).
- Added support for team/match search via a new `--search` option in the get-games.js script.
- Clarified usage: use the bundled script for all listings; do not call the REST API directly.
- @azuro-org/dictionaries is now required only for bet placement, not for listing games.
v1.0.4
**sports-betting v1.0.4**
Initial code and documentation release with strict safety and invocation rules.
- Added standalone betting scripts: `get-games.js`, `place-bet.js`, and `watch-bets.js` for listing games, placing bets, and monitoring bet status.
- Introduced full skill documentation with strict user confirmation and transaction safety requirements.
- Defined all Polygon constants (addresses, URLs, tokens) directly in documentation for reliable reference.
- Required explicit user confirmation for on-chain actions; autonomous or background execution is prohibited.
- Clarified invocation instructions, dependencies, and environment requirements.
v1.0.3
No functional changes in this release.
- Quoted description, compatibility, and homepage, so YAML parses them consistently and colons/commas in the text won’t cause issues.
- Internal documentation and flow descriptions were significantly shortened and clarified in SKILL.md for easier reference.
- User-facing feature set and integration points remain unchanged.
- No modifications detected in code or logic.
v1.0.2
sports-betting 1.0.2
- Clarified environment variable requirements: BETTOR_PRIVATE_KEY is now required, POLYGON_RPC_URL is optional (defaults to public endpoints if unset).
- Updated compatibility and metadata to reflect these env changes.
- Improved documentation for security best practices: strongly recommends using a dedicated betting wallet and warns against exposing private keys.
- Changed homepage URL in metadata to point to https://github.com/skinnynoizze/pinwin-agent.
- No changes to code or implementation; documentation and metadata only.
v1.0.1
**Enhanced transparency and security for bet placement and approval.**
- Now always displays and explains all decoded bet payload details (amount, selections, relayer fee, etc.) to the user before any signing or approval.
- Adds strict verification that the payload matches the user's requested amount and selections before signing—if there’s a mismatch, the process is stopped and the user is alerted.
- Requires bet approval only up to the bet amount plus relayer fee (plus a 0.2 USDT buffer), not unlimited—improving safety.
- Verifies that only the correct relayer and Polygon claim contract are used (never using values passed from external payloads) for all approvals and signing.
v1.0.0
sports-betting v1.0.0
- Initial release enabling on-chain sports betting on Polygon via Pinwin and Azuro Protocol.
- Fetch prematch/live games, pick selections, place bets, and claim winnings using the Pinwin API.
- Compatibility requires Node, viem, @azuro-org/dictionaries, Polygon RPC URL, and wallet private key.
- Includes detailed flows for placing bets and claiming winnings, with user prompts for missing preferences.
- Ensures sufficient balances before betting and provides status checks for bet resolution and redemption.
元数据
常见问题
Sports Betting 是什么？
Place and claim decentralized sports bets on-chain via Pinwin and Azuro: real-time odds, high liquidity, no custody. Fetch prematch and live games from the A... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1118 次。
如何安装 Sports Betting？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install sports-betting」即可一键安装，无需额外配置。
Sports Betting 是免费的吗？
是的，Sports Betting 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Sports Betting 支持哪些平台？
Sports Betting 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Sports Betting？
由 skinnynoizze（@skinnynoizze）开发并维护，当前版本 v1.3.1。
推荐 Skills